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(54) A system utilizing built-in redundancy switchover control 


(57) A redundant system (10), such as a redun- 
dant-modem system, having a plurality of similar com- 
ponents (20a,20b) capable ot operating independently 
of each other. At least one of the components (20a, 20b) 
serves as a spare component (20b). The system further 
includes a plurality of switches (30,35) connected to the 
inputs and outputs of the components (20a,20b) such 
that the inputs and outputs of each of the components 
(20a, 20b) may be rerouted through the component (20b) 
operating as the spare. When operating as a spare, a 
component (20b) monitors status information received 
from the other components (20a) and detects when one 
of the other components (20a) has failed. When one of 
the components (20a) has failed, the component (20b) 
acting as a spare controls the switches (30,35) such that 
the spare component (20b) replaces the failed compo- 
nent (20a). 
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Description 

BACKGROUND OF INVENTION 

Field of the Invention 

The present invention relates to systems utilizing re- 
dundancy switchover control. More particularly, the 
present invention relates to redundant-type systems, 
such as a redundant-modem system, including similar 
independent components at least one of which monitors 
the others and serves as a spare component. 

Discussion of the Related Art 

In systems that require a high degree of reliability, 
such as redundant stand-alone satellite modem systems 
or redundant telephone switches, redundant compo- 
nents are often added to serve as a backup or spare 
component. Redundant stand-alone satellite modem 
systems typically include spare modems provided to re- 
place a modem when it fails so as to not interrupt com- 
munications. 

Generally, when a system includes a spare compo- 
nent, separate switches, as well as redundancy switch- 
over control equipment, must be connected to the sys- 
tem. Typically, a redundancy switchover controller mon- 
itors the status of an operating component and controls 
switches connected to the inputs and outputs of the op- 
erating component and the spare component such that 
the spare component may effectively replace the oper- 
ating component when a failure occurs. 

To accomplish its tasks, the redundancy switchover 
controller and the associated switches require a multi- 
tude of connectors. From a practical standpoint, the 
more connectors the harder the process of connection 
becomes. Numerous connectors become particularly 
burdensome when one must replace a component, and 
especially burdensome should the redundancy switcho- 
ver controller require replacement. Moreover, more con- 
nectors translate into more sources of possible failures. 

In an effort to reduce the number of connections, 
some redundancy switchover controllers are housed 
within the same housing module as the spare compo- 
nent. This way, the manufacturer may make some of the 
required connections internally within this housing. Such 
an arrangement is disadvantageous in that the cost of 
replacing a failed spare component is higher due to the 
fact that it shares a housing with the redundancy switch- 
over controller. Moreover, when the spare component re- 
quires replacement, one may have to disconnect the re- 
dundancy switchover controller from both the spare com- 
ponent and the other operating components. Thus, this 
arrangement presents a major inconvenience should the 
spare component fail. 

Conventional redundancy switchover controllers 
typically include their own processors and power sourc- 
es. Not only do such processors and power sources sig- 


nificantly add to the cost of the system, they also consti- 
tute sources of possible failure. 

SUMMARY OF THE INVENTION 

5 

Accordingly, the present invention has been made 
in view of the above circumstances and has an advan- 
tage of having significantly increased reliablity while hav- 
ing significantly reduced cost. 

10 Another feature of the present invention is that a 
spare component may be used to perform the redundan- 
cy switchover control functions. 

A further advantage of the present invention is that 
redundancy switchover may be provided without requir- 
es ing a separate redundancy switchover controller. 

An additional feature of the present invention is that 
one component may be interchanged with any of the oth- 
er components including the spare components. 

Additional features and advantages of the invention 

20 will be set forth in part in the description which follows 
and in part will be apparent from the description, or may 
be learned by practice of the invention. The features and 
advantages of the invention may be realized and at- 
tained by means of the instrumentalities and combina- 

25 tions particularly pointed out in the written description 
and claims hereof as well as the appended drawings. 

To achieve these and other advantages and in ac- 
cordance with the purpose of the invention, as embodied 
and broadly described herein, the system of this inven- 

30 tion comprises a plurality of similar components capable 
of operating independently of each other, wherein at 
least one of the components serves as a spare compo- 
nent, and a plurality of switches connected to the inputs 
and outputs of the components such that the inputs and 

35 outputs of each of the components may be rerouted 
through the spare component, wherein the spare com- 
ponent comprises means for monitoring the status infor- 
mation received from the other components and detect- 
ing when one of the other components has failed, and 

40 means for controlling the switches such that the spare 
component replaces a failed one of the other compo- 
nents. 

To achieve the above and other advantages in a re- 
dundant-modem system in accordance with the present 

45 invention, the redundant-modem system of this invention 
comprises a plurality of identical modems capable of op- 
erating independently of each other : wherein at least one 
of the modems serves as a spare modem, and a plurality 
of switches connected to the inputs and outputs of the 

50 modems such that the input and output signals of each 
of the modems may be rerouted through the spare mo- 
dem, wherein each of the modems comprises means for 
determining when the modem is to serve as a spare mo- 
dem, means for monitoring status information received 

55 from the other modems when the modem is to serve as 
a spare modem, and for detecting when one of the other 
modems has failed, and means for controlling the switch- 
es when the modem is to serve as a spare modem such 
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that the modem replaces a failed one of the other mo- 
dems. 

It is to be understood that both the foregoing general 
description and the following detailed description are ex- 
emplary and explanatory and are intended to provide fur- 
ther explanation of the invention as claimed. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings, which are incorporat- 
ed in and constitute a part of this specification, illustrate 
several embodiments of the invention and, together with 
the description, serve to explain the objects, advantages, 
and principles of the invention. In the drawings, 

Fig. 1 is a schematic illustration of a system con- 
structed according to a first embodiment of the 
present invention; 

Fig. 2 is a schematic illustration of a modem con- 
structed for use in the embodiments of the present 
invention; 

Fig. 3 is a schematic illustration of a system con- 
structed according to a second embodiment of the 
present invention; 

Fig. 4 is a schematic illustration of a system con- 
structed according to a third embodiment of the 
present invention; 

Fig. 5 is a schematic illustration of a relay power 
switching circuit useful in the third embodiment of 
the present invention; and 

Fig. 6 is a pictorial representation of a chassis for 
housing the embodiments of the present invention. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

Reference will now be made in detail to the present 
preferred embodiments of the invention, examples of 
which are illustrated in the accompanying drawings. 

The system constructed according to the first em- 
bodiment of the present invention is shown in Fig. 1 and 
is designated generally by the reference numeral 10. 

Generally, system 10 includes components 20a and 
20b and relay switches 30 and 35. System 10 represents 
a 1:1 redundancy configuration wherein one of compo- 
nents 20a and 20b serves as an operating component 
(20a) while the other operates as a spare component 
(20b) for the one operating component. Relay switches 
30 and 35 connect the inputs and outputs of components 
20a and 20b such that spare component 20b can reroute 
the inputs and outputs of operating component 20a 
through spare component 20b. 

Components 20a and 20b are similar to one another 


and, preferably, are identical in physical structure to each 
other. By making components 20a and 20b identical in 
structure, one may interchange components 20a and 
20b or replace one of them using the same replacement 
s component. Moreover, either one of components 20a or 
20b may be instructed to serve as a spare for the other 
component. 

When the system includes identical components, 
each component preferably determines when it is to 

io serve as a spare component, or when it is to serve as an 
operating component. This may be accomplished in nu- 
merous ways. One way is to transmit an instruction to a 
component that it is to serve as a spare. One may man- 
ually transmit such an instruction by activating an oper- 

*5 ation mode switch or by transmitting a operation mode 
signal from a separate controller. The instruction may 
also be automatically transmitted from a separate con- 
troller. 

Another manner by which a component may deter- 

20 mine whether it is to serve as a spare, is to provide a 
signalling mechanism in the chassis, which houses the 
components. This signalling mechanism informs a com- 
ponent that it is to serve as a spare. When each of the 
components are separately implemented on single cir- 

25 cuit cards, the chassis may have a slot for supporting 
each circuit card. Hence, the system may automatically 
designate a component as a spare by utilizing a signal- 
ling mechanism in one of the chassis slots whereby the 
component that a slot having the signalling mechanism 

30 supports, operates as a spare. 

The preferred system utilizes the latter method while 
providing a manual override as described in the former 
method. *y 

Once a component determines that it is a spare, the 

35 component operates in a spare mode. In the spare 
mode, the component monitors status information re- 
ceived from the other component and detects when the 
other component has failed. When the spare component 
determines that the other component has failed, the 

40 spare component controls relay switches 30 and 35 such 
that the spare component replaces the other component. 

Preferably, each component 20a and 20b includes 
a microprocessor (21a, 21b), an EPROM (22a, 22b), a ' * 
RAM (23a, 23b), a summary failure indicator (24a, 24b), 

^5 an operational element (31a, 31b), and a bus (25a, 25b). 
Typically, components operating in a redundant system 
include microprocessors and memory for controlling the 
operation of the components. Thus, the present inven- 
tion requires few, if any, additional physical components. 

50 in operation, microprocessor 21b first determines 
that component 20b is to serve as a spare. After making 
this determination, microprocessor 21b enters the spare 
operation mode by executing instructions stored in a 
designated portion of EPROM 22b. In the spare mode, 

55 microprocessor 21b continuously monitors status infor- 
mation received from summary failure indicator 24a of 
operating component 20a via a status line 27a. Should 
a failure occur in operating component 20a, summary 
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failure indicator 24a issues a summary failure signal, 
which microprocessor 21b detects. Upon detecting the 
summary failure signal, microprocessor 21b transmits a 
switch control signal causing relay switches 30 and 35 
to connect component 20b and disconnect component 
20a. Subsequently, microprocessor 21b enters the op- 
erating mode by executing instructions stored in another 
allocated portion of EPROM 22b to control operational 
element 31b and thereby effectuate replacement of the 
failed component. Operational elements 31a and 31b 
perform operations on, or in response to, input signals 
received through relay switches 30 and 35. 

As embodied herein, "means for determining when 
the component is to serve as a spare component," 
"means for monitoring status information received from 
the other components when the component is to serve 
as a spare, and for detecting when one of the other com- 
ponents has failed," and "means for controlling said 
switches when the component is to serve as a spare 
such that the component replaces a failed one of the oth- 
er components" preferably comprise a microprocessor 
such as 21a or 21b. However, these means may alter- 
natively comprise an equivalent hard-wired implementa- 
tion. 

If the components are capable of operating in more 
than one operating mode using various configuration pa- 
rameters, microprocessor 21b of spare component 20b 
preferably requests a current configuration profile of op- 
erating component 20a from microprocessor 21a via a 
multidrop 26. Upon receiving the current configuration 
profile via multidrop 26, microprocessor 21b stores the 
profile in an allocated portion of RAM 23b. Preferably, 
microprocessor 21b updates the configuration profile of 
component 20a whenever the configuration profile of 
component 20a changes. This may be accomplished by 
having microprocessor 21a inform microprocessor 21b 
whenever a change occurs or, preferably, by having mi- 
croprocessor 21b periodically request microprocessor 
21a to inform whether the configuration profile has 
changed. By utilizing microprocessor 21b in spare com- 
ponent 20b to prompt microprocessor 21a in operating 
component 20a for this information, the system provides 
a backup method for detecting a failure of operating com- 
ponent 20a should microprocessor 21a fail to respond to 
a prompt from microprocessor 21 b. 

By maintaining the current configuration profile of 
component 20a in RAM 23b, spare component 20b may 
immediately enter the operating mode using the same 
configuration profile as component 20a should compo- 
nent 20a fail. 

The embodiments of the present invention are par- 
ticularly useful when implemented in a redundant 
stand-alone satellite modem system. In such an imple- 
mentation, components 20a and 20b may comprise 
stand-alone satellite modems. The structure of a 
stand-alone satellite modem useful in the present inven- 
tion is shown in Fig. 2 and is designated generally by the 
reference numeral 120. 


Modem 120 includes a microprocessor 121, a 
EPROM 122, a RAM 123, a summary failure relay 124, 
TTL receivers 1 28, a relay driver 1 29, and an operational 
element consisting of a demodulator 1 37 and a modula- 

s tor 138 all of which are interconnected via a bus 125. 
Modem 120 may additionally incorporate relay switch 
135 on the same circuit board. Relay switch 135 corre- 
sponds to relay switch 35 in Fig. 1 . Likewise, relay switch 
30 (no analogous switch shown in Fig. 2) may also be 

to incorporated on the same circuit board as modem 120. 
Modem 120 additionally includes a baseband I/O port 
1 36, which may be connected to relay switch 30. for an- 
alog [G.703] and digital [RS232, RS449, V.35] I/O con- 
nections. 

15 During normal operation, microprocessor 121 con- 
trols the operation of modulator 138 and demodulator 
1 37 by executing instructions stored in EPROM 1 22 and 
reading data stored in RAM 123. Modulator 138 and de- 
modulator 137 perform modulation and demodulation of 

20 signals passing back and forth between a satellite an- 
tenna via RF/IF relay switch 135 and a terrestrial proc- 
essor via baseband relay switch 30 connected to base- 
band I/O port 1 36. Modulator 138 and demodulator 137 
may also perform various signal processing functions on 

25 the signals supplied thereto. 

Summary failure relay 124 internally monitors the 
status of various modem elements, and issues a sum- 
mary failure signal if it detects a failure. 

Upon receiving an instruction to operate as a spare 

30 modem, microprocessor 1 21 operates in the same man- 
ner discussed above with respect to microprocessor 
21b. In particular, microprocessor 121 executes instruc- 
tions stored in the appropriate portion of EPROM 122 
causing microprocessor 121 to monitor status line 27a 

35 to detect a summary failure signal from an operating mo- 
dem by using one of TTL receivers 1 28 that is connected 
to status line 27a. Additionally, microprocessor 121 gen- 
erates and transmits a polling signal via multidrop 26 to 
request the microprocessor of the operating modem to 

40 transmit its current operating configuration profile. Upon 
receiving the current operating configuration profile, mi- 
croprocessor 1 21 stores the configuration profile in RAM 
1 23. When modem 1 20 serves as a spare for more than 
one modem, microprocessor 1 21 stores the current con- 

4 5 figuration profiles for each modem in unique address ar- 
eas in RAM 123 so that upon a failure of one of the mo- 
dems, microprocessor 121 may immediately read out the 
current configuration profile of the particular modem that 
has failed. 

50 When microprocessor 121 detects a failure of an- 
other modem, it instructs relay driver 129 to signal the 
corresponding baseband relay switch 30 and the RF/IF 
relay switch 135 of the failed modem to disconnect the 
failed modem and to connect the spare modem in its 

55 place. Microprocessor 121 reads the current configura- 
tion profile of the failed modem out of RAM 1 23 and sub- 
sequently enters the normal operating mode described 
above. 
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By merging the redundancy switchover control and 
the operation control of a modem into a single processor 
within the modem, the present invention eliminates the 
necessity of separate processors and power units of a 
physically separate redundancy switchover controller, as 
well as the numerous connections required between the 
redundancy switchover controller and the other mo- 
dems. Because conventional stand-atone satellite mo- 
dems already include processors and memory, the 
present invention does not require any more processors 
or power supplies than required by the modems them- 
selves. The present invention not only significantly de- 
creases the cost of a redundant stand-alone satellite mo- 
dem system, but it also significantly increases the relia- 
bility of the system. The increase in reliability results di- 
rectly from the significant reduction in circuitry and inter- 
connection when a single processor in a spare modem 
performs redundancy switchover control. 

As discussed above, using identical components in 
the present invention allows the components to be freely 
interchanged. A stand-alone satellite modem system 
constructed in accordance with the present invention 
would similarly benefit from the use of identical modems. 
In this way, any modem in the system may serve as either 
an operating on-line modem or a spare modem capable 
of performing redundancy switchover control. 

A second embodiment of the invention will now be 
described with reference to Fig. 3 and is designated gen- 
■ eraliy by the reference numeral 210. 

Generally, system 210 includes components 220a, 
220b, 220c, and 220d and relay switches 230a, 230b, 
230c, 235a, 235b, and 235c. System 210 represents a 
1 :3 redundancy configuration wherein three of the four 
components serve as operating components (220a, 
220b, and 220c) while the other operates as a spare 
component (220d) for the other three operating compo- 
nents. Relay switches 230a, 230b, 230c, 235a, 235b, 
and 235d connect the inputs and outputs of components 
220a, 220b, and 220c with those of component 220d 
such that spare component 220d can reroute the inputs 
and outputs of operating components 220a, 220b, or 
220c through spare component 220d. 

As with the first embodiment, components 220a, 
220b, 220c, and 220d are similar to one another and, 
preferably, are identical in physical structure to each oth- 
er. By making components 220a, 220b, 220c, and 220d 
identical in structure, one may interchange components 
220a, 220b, 220c, and 220d or replace one of them using 
the same replacement component. 

When the system includes identical components, 
each component preferably determines when it is to 
serve as a spare component, or when it is to serve as an 
operating component. This may be accomplished in any 
of the ways discussed above with respect to the first em- 
bodiment. 

Once a component determines that it is a spare, the 
component operates in a spare mode. In the spare 
mode ; the component monitors status information re- 


ceived from the other three components and detects 
when one of the other components has failed. When the 
spare component determines that one of the other com- 
ponents has failed, the spare component controls the re- 

s lay switches (230a, 230b, 220c, 235a, 235b, and 235c) 
corresponding to the failed component such that the 
spare component replaces the failed component. 

Preferably, each component 220a, 220b, 220c, and 
220d includes a microprocessor (221a, 221b, 221c, 

10 221 d), an EPROM (222d,(not shown in components 
220a, 220b, and 220c)), a RAM (223d,(not shown in 
components 220a, 220b, and 220c)) ( a summary failure 
indicator (224a, 224b, 224c, (not shown in component 
220d)), TTL receivers (228d(not shown in components 

*5 220a, 220b, and 220c)), operational element (231a, 
231 b, 231 c, and 231 d), and a bus (225d,(not shown in 
components 220a, 220b, and 220c)). 

In operation, microprocessor 221 d first determines 
that component 220d is to serve as a spare. After making 

20 this determination, microprocessor 221 d enters the 
spare operation mode by executing instructions stored 
in a designated portion of EPROM 222d. In the spare 
mode, microprocessor 221 d continuously monitors sta- 
tus information receivedfrom summary failure indicators 

25 224a, 224b, and 224c of operating components 220a, 
220b, 220c via TTL recievers 228d connected to status 
lines 227a, 227b, 227c. Should a failure occur in any one 
of operating components 220a, 220b, or 220c, the sum- 
mary failure indicator thereof issues a summary failure 

30 signal, which microprocessor 221 d detects. Upon de- 
tecting the summary failure signal, microprocessor 221 d 
transmits a switch control signal to relay. .driver 229d 
causing the relay switches corresponding to the failed 
component to connect component 220d and disconnect 

35 the failed component. Subsequently, microprocessor 
221 d enters the operating mode by executing instruc- 
tions stored in another allocated portion of EPROM 222d 
to control operational element 131d and thereby effec- 
tuate replacement of the failed component. 

to if the components are capable of operating in more 
than one operating mode using various configuration pa- 
rameters, microprocessor 221 d of spare component 
220d preferably requests a current configuration profile 
of each of operating components 220a, 220b, and 220c 

4 5 from the corresponding microprocessor via a multidrop 
226. Upon receiving the current configuration profiles via 
multidrop 226, microprocessor 221 d stores the profiles 
in allocated portions of RAM 223d. ^Preferably, micro- 
processor 221 d updates the configuration profiles of the 

50 other components whenever the configuration profiles 
change. This may be accomplished by having micro- 
processor 221 d periodically poll each microprocessor of 
the other components to request them to inform micro- 
processor 221 d whether their configuration profiles have 

55 changed. By utilizing microprocessor 221 d in spare com- 
ponent 220d to prompt microprocessors 221 a, 221 b, and 
221c in the other components for this information, the 
system provides a backup method for detecting a failure 
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of an operating component should one of the microproc- 
essors fail to respond to a prompt from microprocessor 
221 d. 

By maintaining the current configuration profiles of 
the other components 220a, 220b, and 220c in RAM 
223d, spare component 220d may immediately enter the 
operating mode using the same configuration profile as 
the failed component. 

Like the first embodiment, the second embodiment 
of the present invention as shown in Fig. 3, is particularly 
useful when implemented in a redundant stand-alone 
satellite modem system. In such an implementation, 
components 220a, 220b, 220c, and 220d may comprise 
stand-alone satellite modems, such as that shown in Fig. 
2. 

In a redundant stand-alone satellite modem system 
constructed in accordance with the second embodiment 
ol the present invention, modem 1 20 operating as spare 
component 220d, stores in RAM 123, the configuration 
profiles of modems 220a, 220b, and 220c received via 
multidrop 226, and monitors the status of modems 220a, 
220b, and 220c via corresponding status lines 227a, 
227b, and 227c. 

To communicate with the other microprocessors via 
multidrop 226, microprocessor 121 utilizes ID codes 
uniquely assigned to each of the other processors. 

A third embodiment of the invention will now be de- 
scribed with reference to Figs. 4 and 5 and is designated 
generally by the reference numeral 310. 

Generally, system 310 includes nine components 
320a, 320b, 320c, 320d, 320e, 320f, 320g, 320h, and 
320i and may optionally include a tenth component 320j. 
Additionally, system 310 includes relay switches 330a-h, 
330j, and a relay power switching circuit 340. System 
310 represents either a 1:8 redundancy configuration 
wherein one component (320i) serves as a spare for the 
other eight operating components (320a-h), or a dual 1 :4 
configuration wherein an additional component (320j), 
which is inserted into the chassis housing the system, 
serves as a spare for four (320a-d) of the eight operating 
components while component 320i serves as the spare 
for the remaining four operating components (320e-h). 
Relay switches 330e-h connect inputs and outputs of 
components 320e-h with those of spare component 320L 
Relay switches 330a-d connect inputs and outputs of 
components 320a-d with those of either spare compo- 
nent 320i or spare component 320j. In the 1 :8 redundan- 
cy configuration, relay switches 330a-j operate such that 
spare component 320i can reroute the inputs and out- 
puts of any one of operating elements 331 a-h of operat- 
ing components 320a-h through operating element 331 i 
of spare component 320L In the dual 1:4 redundancy 
configuration, relay switches 330a-j and operate such 
that spare component 320j can reroute the inputs and 
outputs of any one of operating elements 331 a-d of op- 
erating components 320a-d through operating element 
331 j of spare component 320j and spare component 320i 
can reroute the inputs and outputs of any one of operat- 


ing elements 331 e-h of operating components 320e-h 
through operating element 331 i of spare component 
320i. 

Relay switches 330 may be incorporated into com- 

s ponents 320. 

Relay switches 330a-h and 330j are multiple sets of 
relays shown in a relay bank 350, which may be located 
in the backplane of the chassis housing the system. Re- 
lay bank 350 includes relay power switching circuit 340 

*0 for driving switches 330a-h and 330j in response to out- 
put signals from relay drivers 329i and 329j and from 
summary failure indicators 324i and 324j. 

Fig. 5 shows the details of an exemplary relay power 
switching circuit 340. Relay power switching circuit 340 

is includes relay switches 360-369. Relay switches 360 
and 361 receive device present signals transmitted from 
summary failure indicators 324i and 324j, respectively. 
Should spare component 320j not be present or working 
properly, relay switch 361 effectively maintains switch 

20 330j in the position shown in Fig. 4 such that spare com- 
ponent 320i serves as a spare for operating components 
320a-d as well as components 320e-h. Moreover, the ab- 
sence of signal RLY5 from relay driver 329j permits relay 
driver 329i to control switches 330a-d via relay switches 

2S 363, 364, 367, 365, and 369. On the other hand, when 
component 320j is present, relay power switching circuit 
340 receives a device present signal from summary fail- 
ure indicator 324j and a signal from relay driver 329j 
causing relay switches 361 and 362 to signal relay switch 

30 330j to disconnect the signal transmission line of com- 
ponent 320i from relay switches 330a-d. When relay 
power switching circuit 340 receives a RLY5 signal from 
relay driver 329j, relay switch 367 prevents relay driver 
329i from sending control signals to relay switches 

35 330a-d. Thus, when component 320j is present, compo- 
nent 320i controls relay switches 330e-h via relay switch- 
es 363, 364, 365, and 366 and component 320j controls 
relay switches 330a-d via relay switches 362, 368, and 
369. 

40 Fig. 6 shows an example of a chassis 400 for hous- 
ing a system constructed in accordance with the third 
embodiment of the present invention. Chassis 400 in- 
cludes a plurality of slots 410 for supporting circuit cards 
each having a component 320 provided thereon. Some 
of slots 410 designate the circuit cards inserted therein 
as spares, while the remaining slots designate circuit 
cards inserted therein as operating components. The 
designation of a circuit card to serve as either a spare or 
an operating component may be implemented by 

so hard-wiring a connector within the slot that contacts the 
circuit card in such a manner that the component on the 
card recognizes the role it is designated to take. 

Like the first and second embodiments, the third em- 
bodiment of the present invention as shown in Fig. 4, is 

55 particularly useful when implemented in a redundant 
stand-alone satellite modem system. In such an imple- 
mentation, components 320a-j may comprise 
stand-alone satellite modems, such as that shown in Fig. 
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2. 

The above described embodiments include 1:1, 1 :3 t 
and 1 :8/dual 1 :4 redundancy configurations. It should be 
understood that the present invention is not limited to 
these exemplary redundancy configurations, but may be 
implemented in any M:N redundancy configuration. 

Although the preferred embodiments are described 
above as being applicable to redundant stand-alone sat- 
ellite modem systems, it will be appreciated that the 
present invention is not limited to such a specific appli- 
cation, rather the present invention may be applied to 
any system that may benefit from the use of such a 
built-in redundancy switchover control. An additional ex- 
ample of such a system that would benefit from the 
present invention is a telephone switching system. 

The foregoing description of preferred [ embodiments 
of the invention has been presented for purposes of il- 
lustration and description. It is not intended to be exhaus- 
tive or to limit the invention to the precise form disclosed, 
and modifications and variations are possible in light of 
the above teachings or may be acquired from practice of 
the invention. The embodiments were chosen and de- 
scribed in order to explain the principles of the invention 
and its practical application to enable one skilled in the 
art to utilize the invention in various embodiments and 
with various modifications as are suited to the particular 
use contemplated. It is intended that the scope of the 
invention be defined by the claims appended hereto, and 
their equivalents. 


Claims 

1 . A system comprising: 

a plurality of similar components (20a, 20b) 
capable of operating independently of each other, 
wherein at least one of said components (20a, 20b) 
serves as a spare component; and 

a plurality of switches (30,35) connected to the 
inputs and outputs of said components (20a,20b) 
such that the inputs and outputs of each of said com- 
ponents (20a,20b) may be rerouted through said 
spare component, 

wherein said spare component comprises 

means (21a,21b) for monitoring status 
information received from the other components and 
detecting when one of the other components has 
failed, and 

means (21a,21b) for controlling said 
switches (30,35) such that said spare component 
replaces a failed one of the other components. 

2. The system of claim 1, wherein said components 
(20a, 20b) are signal processors. 

3. The system of claim 1, wherein said components 
(20a,20b) are modems (120). 


4. The system of claim 1 , wherein said components 
(20a,20b) are stand-alone satellite modems (120). 

5. The system of claim 1 1 wherein said spare compo- 
5 nent further comprises: 

a memory (23a,23b) for storing current oper- 
ating configurations of each the other components, 
which are provided in status information transmitted 
to said spare component from the other compo- 

10 nents, 

wherein said means (21a,21b) for monitoring 
reads the current operating configuration for a failed 
one of the other components from said memory 
(23a,23b) and implements the operating configura- 

15 tion in said spare component. 


6. The system of claim 5, wherein said spare compo- 
nent further comprises means (21 a, 21 b) for gener- 
ating and transmitting a polling signal to the other 

20 components to request updates of current operating 
configurations. 

7. The system of claim 1 , wherein the plurality of com- 
ponents (320a-j) include two spare components 

2$ (320i,320j), which serve as spares for two different 
groups of the other components (320a-h). * 

8. A redundant-modem system comprising: 

a plurality of modems (20a, 20b ; 120) -capable 
30 of operating independently of each other, wherein at 
least one of said modems (20a, 20b, 120) serves as 
a spare modem; and 

a plurality of switches (30,35) connected to the 
inputs and outputs of said modems (20a,20b,1 20) 
35 such that the input and output signals of each of said 
modems (20a,20b,1 20) may be rerouted through 
said spare modem, 

wherein said spare modem (120) comprises 
means (1 21) for monitoring status infor- 
«o mation received from the other modems and detect- 
ing when one of the other modems has failed, and 
means (121) for controlling said 
switches (30,35) such that said spare modem 
replaces a failed one of the other modems. 

45 

j 

9. The redundant-modem system of claim S, wherein 
said modems (20a,20b,1 20) are stand-alone satel- 
lite modems. 

50 10. The redundant-modem system of claim B, wherein 
said spare modem (120) further comprises: 

a memory (123) for storing current operating 
configurations of each the other modems, which are 
provided in the status information transmitted to said 
55 spare modem from the other modems, 

wherein said means ( 1 21 ) for monitoring reads 
the current operating configuration for a failed one 
of the other modems from said memory (123) and 
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implements the operating configuration in said spare 
modem (120). 
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FIG. 1 
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FIG. 2 
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FIG. 4A 
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FIG. 4B 
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FIG. 5 
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